CVE-2017-0199 Microsoft Office And WordPad
Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files. Successful exploitation allows for remote code execution.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Office and WordPad Remote Code Execution Vulnerability
- Added
- 2021-11-03
- Federal patch deadline
- 2022-05-03
- Ransomware use
- known
Actors known to use it (MITRE ATT&CK)
- APT41China · Wicked Panda, Brass Typhoon, BARIUM · 66 techniques
- Mustang PandaChina · TA416, RedDelta, BRONZE PRESIDENT · 61 techniques
- MuddyWaterIran · Earth Vetala, MERCURY, Static Kitten · 48 techniques
- LeviathanChina · MUDCARP, Kryptonite Panda, Gadolinium · 37 techniques
- PatchworkHangover Group, Dropping Elephant, Chinastrats · 34 techniques
- Cobalt GroupGOLD KINGSWOOD, Cobalt Gang, Cobalt Spider · 26 techniques
- APT37North Korea · InkySquid, ScarCruft, Reaper · 25 techniques
- BlackTechChina · Palmerworm · 10 techniques
- TA4594 techniques